Go with runtime templating for pwreset and signup URLs.

This facilitates different links in test and pilot setups.